cbcvebase.

Microsoft Windows Server 2012 R2 vulnerabilities

4,050 known vulnerabilities affecting microsoft/windows_server_2012_r2.

Total CVEs
4,050
CISA KEV
101
actively exploited
Public exploits
96
Exploited in wild
135
Severity breakdown
CRITICAL182HIGH2836MEDIUM1020LOW12

Vulnerabilities

Page 51 of 203
CVE-2021-33756P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.200692021-07-14
CVE-2021-33756 [HIGH] CVE-2021-33756: Windows DNS Snap-in Remote Code Execution Vulnerability Windows DNS Snap-in Remote Code Execution Vulnerability
nvd
CVE-2022-37976P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.206252022-10-11
CVE-2022-37976 [HIGH] CVE-2022-37976: Active Directory Certificate Services Elevation of Privilege Vulnerability Active Directory Certificate Services Elevation of Privilege Vulnerability
nvd
CVE-2022-34691P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.205202022-08-09
CVE-2022-34691 [HIGH] CWE-269 CVE-2022-34691: Active Directory Domain Services Elevation of Privilege Vulnerability Active Directory Domain Services Elevation of Privilege Vulnerability
nvd
CVE-2022-34731P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.205712022-09-13
CVE-2022-34731 [HIGH] CVE-2022-34731: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2022-35834P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.205712022-09-13
CVE-2022-35834 [HIGH] CVE-2022-35834: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2022-35835P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.205712022-09-13
CVE-2022-35835 [HIGH] CVE-2022-35835: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2022-35836P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.205712022-09-13
CVE-2022-35836 [HIGH] CVE-2022-35836: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2022-34733P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.205712022-09-13
CVE-2022-34733 [HIGH] CVE-2022-34733: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2022-35840P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.205712022-09-13
CVE-2022-35840 [HIGH] CVE-2022-35840: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2022-37975P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.206252022-10-11
CVE-2022-37975 [HIGH] CVE-2022-37975: Windows Group Policy Elevation of Privilege Vulnerability Windows Group Policy Elevation of Privilege Vulnerability
nvd
CVE-2019-0720P3HIGHCVSS 8.0≥ 6.3.0, < publication2019-08-14
CVE-2019-0720 [HIGH] CWE-20 CVE-2019-0720: A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fa A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to exe
nvd
CVE-2021-41342P3HIGHCVSS 8.8≥ 6.3.0, < 6.3.9600.20144≥ 6.3.0, < 1.0012021-10-13
CVE-2021-41342 [HIGH] CVE-2021-41342: Windows MSHTML Platform Remote Code Execution Vulnerability Windows MSHTML Platform Remote Code Execution Vulnerability
nvd
CVE-2022-41048P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.206712022-11-09
CVE-2022-41048 [HIGH] CVE-2022-41048: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2022-41047P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.206712022-11-09
CVE-2022-41047 [HIGH] CVE-2022-41047: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2023-36882P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.215032023-08-08
CVE-2023-36882 [HIGH] CWE-416 CVE-2023-36882: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2023-29373P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.210132023-06-14
CVE-2023-29373 [HIGH] CWE-125 CVE-2023-29373: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2020-16891P3HIGHCVSS 8.8≥ 6.3.0, < publication2020-10-16
CVE-2020-16891 [HIGH] CWE-20 CVE-2020-16891: <p>A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to prope A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrar
nvd
CVE-2026-88091P3HIGHCVSS 7.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-88091 [HIGH] CWE-502 CVE-2026-88091: Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacke Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70185P3HIGHCVSS 8.8≥ 6.3.9600.0, < 6.3.9600.234702026-10-13
CVE-2026-70185 [HIGH] CWE-639 CVE-2026-70185: Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a securit Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2022-34714P3HIGHCVSS 8.1≥ 6.3.9600.0, < 6.3.9600.205202022-08-09
CVE-2022-34714 [HIGH] CWE-94 CVE-2022-34714: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
← Previous51 / 203Next →
Microsoft Windows Server 2012 R2 vulnerabilities | cvebase